UNIVERSITY OF LINCOLN JOB DESCRIPTION

Transcription

1 UNIVRSITY OF LINCOLN JOB DSCRIPTION JOB TITL DPRTMNT LOCTION Identity and ccess Management (IM) Manager ICT Services Brayford Pool JOB NUMBR CS4137 GRD 7 DT November 2016 RPORTS TO CONTXT The ICT Services Department has a headcount of over 70 with a multi-million pound budget and is responsible for the provision and support of ICT services across all departments and colleges of the University. The effective and efficient operation of the ICT services is critical to the success and continued operation of the University. Development of new and existing services and systems is required to support the achievement of the University objectives. ICT Services, on behalf of the University, is introducing an IM solution which will underpin the management of identities of all ICT users and provide the right people with the right access to the systems they need. JOB PURPOS The IM Manager will provide expert oversight of the IM solution during its introduction and throughout its operational life. They will work closely with colleagues throughout ICT Services and the University as a whole, ensuring that the solution is exploited to best advantage. They will be critically aware of the impact of the solution, and the associated processes, across the University, ensuring that the effects of decisions are fully understood before changes are made. Work will take place in a project context, under the direction of a Project Manager but with the expectation that this role will lead certain elements, and outside of projects with this role being the department s foremost expert on IM. The IM Manager effectively owns and manages the toolsets used for Identity and ccess Management, auditing and authentication. They play a key management role in planned changes and projects, and is the IM service responsible person. Page 1 of 6

2 KY RSPONSIBILITIS Identity Management Manages the identity management platform and services. Maintains and leads the support of the identity management platform and services. Protects the identity management platform to safeguard the University s IT systems and their data. Clarifies requirements, designs, builds, tests and implements identity and directory-related systems and solutions. nsures identity management processes are aligned to Data Protection, Data Loss Prevention, Information Security and Data ccess Management Policies. Strives to establish and maintain a single source of truth for each type of identity data, including staff, students and affiliates, and adheres to the University s principles of Master Data. Manages the processes and practises of maintaining a single identity per person. Responsible Person for the Identity and ccess Management Services. ccess Management Manages the access management platform and services. Maintains and leads the support of the access management platform and services. Leads the definition of access rights and privileges. Configures IM solutions and related systems access controls and directly associated security services in order to provide continuous and secure access to information services. Defines and manages the processes of granting authorised users the right to use a service, while restricting access to non-authorised users or managing changes to jobs or roles. Liaises closely with data owners, and ensures that access to data is based on authorisations given by data owners. Policy and Standards Puts in place change management procedures for IM solutions, in harmony with University change control practices. nsures that data owners are aware of their obligations for user access management and auditing of this. Highlight and bridge gaps on individuals, departments or group functions where ownership is unclear or not being followed. In consultation with senior security personnel, devises and documents new or revised procedures relating to identity and access management of IT environments, systems, products or services. Page 2 of 6

3 Integration and Configuration Management Manages the architecture of IM solutions in consultation with the Senior Systems rchitect and in accordance with the ICT Strategy and defined target architectures. Designs and leads on integration between IM and other solutions, and provides expert technical knowledge in the configuration of software and other system components. nsures that other systems and infrastructure are taken fully into account and that, where necessary, systems interface with one another correctly. Manages the configuration of IM solutions, and ensures changes are correctly identified, managed and documented. Consults with senior management to ensure understanding of impacts and acceptance of integration and change. nsures testing is planned, managed and carried out prior to and following changes to or implementation of operational IM systems. Communication Negotiates with and influences key stakeholders in regards to operational change that will significantly impact on the way services are delivered. Reports and escalates in an appropriate and timely fashion to the customer, line management and all service suppliers and initiate timely, corrective action where required. Undertakes complex written work requiring interpretation and explanation and communicating to a wide range of audiences. Project Management Takes responsibility for the successful completion of minor projects of work, or work-streams within projects, establishing and maintaining the correct structures to control and monitor the deliverables to the business. nsures that comprehensive project, quality, and risk plans for projects of a complex nature are prepared and maintained. Monitors and controls team performance against plans. xceed customer and corporate expectations and project acceptance criteria in respect of delivery to timescales, budget and being fit for purpose. ttends internal and external committees or working groups as an active participant. In addition to the above, undertake such duties as may reasonably be requested and that are commensurate with the nature and grade of the post. Page 3 of 6

4 DDITIONL INFORMTION Scope and dimensions of the role Identity & ccess Management is the execution of both ccess availability and user security management (uthentication) The role is responsible for the IM service, assisting UoL in protecting Confidentiality, Integrity and vailability of Identity data through regular auditing and management of changes to user s access and authentication through role based access control (RBC). Governance of the Identity Management processes are an important aspect of this role, achieving buy in from stakeholders of the value of IM and RBC and the importance of maintaining accurate records. The IM design and process will be within the remit of the organisations Technical Design uthority to approve. The role will be expected to implement and then develop the solution, through continuous improvement, identifying best practise and innovative ways to manage the IM solution. In depth knowledge of Identity & ccess Management and Identity Governance is key to assist the implementation and take over the subsequent responsibility for the solution. Internal Key working relationships/networks xternal IM Developer Business nalyst Project Managers Programme Managers Systems rchitects ICT Services colleagues Nominated key stakeholders from across the University IM Solution supplier(s) Suppliers of other IT solutions used by the University Contacts at other universities undertaking similar initiatives Page 4 of 6

5 UNIVRSITY OF LINCOLN PRSON SPCIFICTION JOB TITL IM Manager JOB NUMBR CS4137 Selection Criteria Qualifications: ducated to a degree level in Information Technology / Information Security or equivalent experience relevant certification such as: Microsoft, CISSP, CIS, CISM, ITIL. ssential () or Desirable (D) D Where videnced pplication () Interview (I) Presentation (P) References (R) Membership of relevant professional bodies D xperience: xperience of the Identity Management industry with working knowledge of at least two, market leading IM product suites e.g. Dell, Sail Point, Oracle, RS, Microsoft xperience of developing IM strategies and architectures, leading and embedding improvements into business as usual ensuring sustainable operation of IM processes and services good technical understanding of data sharing, integration and transfer between systems, including TL, data warehousing and Master Data Management lifecycle and technologies Be able to describe common IM technologies (SML, Outh, OpenID) D P P Higher ducation ICT expertise and systems knowledge D Skills and Knowledge: Understanding of Cloud / Hybrid / On-premise managed service solution options Strong interest in and good understanding of Identity/Security management ctive Directory engineering knowledge including proficiency with DSI/LDP scripting Understanding of requirements and drivers for Identity & ccess Management and Role Based ccess Control Competencies and Personal ttributes: D bility to use personal influence to resolve conflict and Page 5 of 6

6 move forward bility to chair meetings and groups to make decisions and solve problems Creative approach to solving problems using professional knowledge, where situations are complex and unique and information is limited bility to make clear and well organised presentations I P Delegating tasks, responsibilities and authorities effectively Collaborative, able to build working networks ble to lead and influence peers and to manage change Business Requirements: ble to travel between campuses, to suppliers, other partner locations and sites as required ble to work flexibly as and when required in accordance with the needs of the University ssential Requirements are those, without which, a candidate would not be able to do the job. Desirable Requirements are those which would be useful for the post holder to possess and will be considered when more than one applicant meets the essential requirements. uthor H HRB CW Page 6 of 6